Criu · Criu · CVE-2026-18107
**Name of the Vulnerable Software and Affected Versions**
CRIU (affected versions not specified)
**Description**
An issue exists in the handling of restartable sequences (rseq) during the checkpoint/restore process. A malicious process within a container can register an rseq critical section to hijack the parasite code injection during a checkpoint. This allows the process to spoof credentials saved in the checkpoint image, resulting in the container process gaining elevated capabilities and zeroed UIDs/GIDs upon restoration.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.